Online Access Free 5V0-41.21 Exam Questions

Which are two use-cases for the NSX Distributed Firewall' (Choose two.)

• A.Zero-Trust with segmentation
• B.Security Analytics
• C.Lateral Movement of Attacks prevention
• D.Software defined networking
• E.Network Visualization

An administrator has configured a new firewall rule but needs to change the Applied-To parameter. Which two are valid options that the administrator can configure? (Choose two.)

• A.profiles
• B.groups
• C.services
• D.rule
• E.DFW

A Security Administrator needs to update their NSX Distributed IDS/IPS policy to detect new attacks with critical CVSS scoring that leads to credential theft from targeted systems.
Which actions should you take?

• A.* Update Distributed IDS/IPS signature database
  * Edit your profile from Security > Distributed IDS > Profiles
  * Select Critical severity, filter on attack type and select Successful Credential Theft Detected
  * Check the profile is applied in Distributed IDS rules
• B.* Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules
  * Filter on attack type and select Successful Credential Theft Detected
  * Update Mode to detect and prevent
  * Click on gear icon and change direction to IN-OUT
• C.* Create a new profile from Security > Distributed IDS > Profiles
  * Select Critical severity, filter on attack type and select Successful Credential Theft Detected
  * Check the profile is applied In Distributed IDS rules
  * Monitor Distributed IDS alerts to validate changes are applied
• D.* Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules
  * Filter on attack type and select Successful Credential Theft Detected
  * Update Mode to detect and prevent
  * Click on gear icon and change direction to OUT

What component in a transport node receives the firewall configuration from the central control plane?

• A.nsx-ccp
• B.nsx-mpa
• C.nsx-appl-proxy
• D.nsx-proxy

Which two Guest OS drivers are required for the Identity Firewall to operate? (Choose two.)

• A.Guest Introspection
• B.vmxnet3
• C.NSX File Introspection
• D.NSX Network Introspection
• E.e1000e